last executing test programs: 4m20.420049784s ago: executing program 5 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101097, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m18.799505248s ago: executing program 5 (id=17): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40842, 0x101) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f00000001c0)='msdos\x00', 0x200800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0xf, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x63, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c2000003080503072737054decbf4301175af363c953238061e6054993670f17901e6940b193a0ea7c897f57625c13e993664ea107458d72672d0aad0fe440fc5a1c1169bc7901168ae6ec36f099c0f74a95d5cf77"], 0x0) sendfile(r1, r1, 0x0, 0x40008) 4m17.576324138s ago: executing program 0 (id=19): socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161200, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/6, 0x6}], 0x1}}], 0x1, 0x600000a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2800, 0xd59f82, 0x2, 0x5, 0xb, 0x8, 0x0, 0xbef, 0x1, 0x7, 0x9, 0x2b, 0x4, {0xffff945a, 0x1}, 0x9, 0xf1}}) writev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc}) 4m15.930965091s ago: executing program 5 (id=22): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) inotify_init1(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0xffff, 0x81, 0x693fffd, 0xf0, 0x9}, &(0x7f0000000380)=0x9c) sendto(0xffffffffffffffff, &(0x7f0000000540)="0cc31a4098ddc80dadd3a0aa2bea9050d9f47bcde4cbb8170d3d61aabbdbd869e8a75ab95a3b8e8b960477dbbbbf5cb0fd4a98ea0032d054de676f19c5e1f84def57482d1b3eb94a2a1d3c0a733709610ece6cb54ae7f8c3ed385c3890244d348c9bcfb556ee478845ff23d8a9f2a492531e7c7ce719ef1983bdaf4008386323fc593be590321dbe51aa4ecabebf49ab7edb835efc0f722637337e20cc541399dc617deafa840b68f2b22e5f7c6afb3825871b966ab90a79a4d6d72f29a1e43abdf4d25f6352dfa26c576830c49b18ece887b47c37affa1c3f24fdb0e14151550796aaa09b4669e71d9f4255f63905467b709f7a7185347a078538e4443f0dad324393274e857979db0a9e3894857aacabc2f2ccd9457fda98a520e2b8c83085a206c8aea9dd18a0b66c87b3b61f95fafed84303436c7ae3782f714dc364c10102788b02d3aed05cb29fe974b75e7bf53dfd2554d7b700dcbf24a6fa021732b747a2c7d6d2a649e1ca523f91ba57da29e6e5050da7ec9466884aea64349e0c65b40bd78fe25622a5f854d351fd3282e85e37989b73e1a3b9fe874ad7131850117f285afe15040fd20cd9c861c95b2c1f9844ac1f8b3cd0a7f22269e235866434acb5f4d9d0b64301cd5b4e8c2da68caacd3f7dda0f325120ad99c05a55736067c87cceda7b850758e60ab8829b0dbfdc1ca8322e6716e643e00c2f665781461f08282a0aa366d9927036d685c3a721530dafe21e62906c5710c3214621d6374d9f5eef47eca1e5080e21832e6d639822a3bf99784f7b19e2dfaa7b8ba39dc5212c94585af38e7a50cbf6d619e3f1b8e4c17351203fa037ca4ce7ef32fd8b4387b8583ebd32a0c5aeb05fced1e492670cabc370aba18abe561e2bfcfa6d92c0c3d0419f5f4936772b6a0026a62391", 0x28e, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) 4m15.924305553s ago: executing program 0 (id=23): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) io_setup(0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000000040000"], 0x50) 4m14.06089674s ago: executing program 32 (id=22): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) inotify_init1(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0xffff, 0x81, 0x693fffd, 0xf0, 0x9}, &(0x7f0000000380)=0x9c) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x28e, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) 4m14.053447983s ago: executing program 0 (id=26): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x25, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x9c, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4m8.27921644s ago: executing program 0 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m4.732281495s ago: executing program 0 (id=35): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0xfffffffd, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x4181) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 3m56.905334048s ago: executing program 0 (id=43): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0xfffffffd, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x4181) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0xfffffff8}) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 3m54.929496292s ago: executing program 33 (id=43): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0xfffffffd, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x4181) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0xfffffff8}) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 17.461403565s ago: executing program 4 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$FUSE(r4, &(0x7f0000001680)={0x2020}, 0x2020) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xc4c01) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 16.249423319s ago: executing program 4 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 13.469237409s ago: executing program 1 (id=437): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], '\x00'}, @datasec={0x6, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000f80)=""/4094, 0x38, 0xffe, 0x1}, 0x28) 12.186908854s ago: executing program 2 (id=439): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x48) syz_emit_vhci(&(0x7f0000002300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_ENABLE={{0x7}, 0xd2}}}, 0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 10.62923886s ago: executing program 2 (id=440): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x20000011, &(0x7f0000000000), 0x86, 0x4a1, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvbLuFCqUFf/JDWUViI9rSgsrBxGg04WJiogc91lIJUsBATYQ0gsbg0fgXqEcT/wJPejHqSeNV78aEGC5WD2bN/Cq77bb013Yr+/kk2743OzPvfWfm7byZN7sBdK1a+ieJ2BkRv0bEYJ5tnqGW/5u7OTv5983ZySTq9Vf/TLL5/ro5O1nOurP4v6NY53AlovJREvsri8u9dPnK2Ynp6amLRX505tw7o5cuX3nyzLmJ01Onp86Pnzhx/NjYM0+PP7UhcQ6kdd33/oUDe0++8enLk/V484ev0vr3FO83xpEbWneZtahFf9TrzeH3ZX8Pr3vtW8tAQzrp7WBFWJX0+E93VzVr/4PRE7d23mC89GFHKwe0Vb1er+9eNDU/K1YOJ9n7wJ1KG4duVZ7x0+vf8rW5PZDOuvF8fgGUxj1XvPJ3eiO9bk+G8iv2njaVvzMiXr/2z2fpK1rehwAA2FjfpP2fJ1r1/ypxX8N8u4qxoaGIOBIReyLi7oi4JyLujcjmvT8iHlhl+bUF+bz8asOUn/vXGttKpP2/Z4uxreb+3/yozVBPkRvI4q8mb52ZnjpabJPhqG5L82PLlPHti798kiVaRFJr6P+lr7T8si9Y1OOP3m3Ny5yamJlYb9ylGx9E7Ot9rkX8yfxIQBIReyNi3xrWn26zM49/eSBN79qx+P3bx7+MDRhnqn8R8Vi+/6/FgvhLSV7SUuOTo9tjeuroaHlULPbjT9dfacw3Ht21LIw1xr8B0v1/12xRo1bxl82gHK+9tPoyrv/28ZLXNGs9/vuS17J0XzHtvYmZmYtjEX3FhKbp47eWLfPl/Gn8w4dat/89Ef9+Xiy3PyLSg/jBiHgoIg4WdX84Ih6JiEPLxP/9C4++vfwW6uz+P9Xy82/++B9KivhTF+cH7ptG8JunLEj0nP3u66XKX9n+P56lhospK/n8W6Y6TYk1bjYAAAD4X6lkY9BJZWQ+XamMjOTP8Je3XY7U4t3zp/Kx6qGoVso7XYMN90PHinvDZX58Qf5YROzOnjTqz/IjkxemBzocO3S7HUu0/9Tv7XroBdgyqquaO2lbPYAO8H1N6F6t239bn7sCtgjnf+he2j90r1bt/2rEXAeqAmyyFu1/eyfqAWy+lff/PREAdxrX/9C9tH/oSou/Et9f/HTCyr4/v1Riz8l1Lb7aRHUTy9rgRE+b1hyNP9rRhkRUOr7p1p6obIVqHCwS2273AxoNiasN+7Q8bbejhtXpDn4oAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbKD/AgAA//+WCdLb") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) 9.5632029s ago: executing program 1 (id=442): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 9.456869105s ago: executing program 2 (id=444): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) inotify_init1(0x0) r1 = io_uring_setup(0x5053, &(0x7f0000000140)={0x0, 0x8efe, 0x800, 0x0, 0x26}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 9.237437781s ago: executing program 1 (id=445): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfff3, [0x80, 0x1742], 0x40}, 0x10) 9.133080721s ago: executing program 3 (id=446): r0 = fsopen(&(0x7f0000000240)='tmpfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='seclabel', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x2000006, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x25, 0x35b, &(0x7f0000000200)="$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") ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendfile(r5, r5, 0x0, 0x9) 9.049303225s ago: executing program 2 (id=447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 8.901333251s ago: executing program 4 (id=448): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getrlimit(0x8, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, &(0x7f0000000440)=""/70, 0x0, 0x46, 0x0, 0x8a10, 0x10000}, 0x28) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) 8.133319931s ago: executing program 3 (id=449): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 6.719538312s ago: executing program 2 (id=450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x15, &(0x7f00000007c0)=ANY=[@ANYRES8], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x1, &(0x7f0000000380), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) getdents64(r2, &(0x7f0000003f80)=""/4091, 0xffb) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000580)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") execve(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 6.05859869s ago: executing program 4 (id=451): syz_open_procfs(0x0, &(0x7f0000000600)='net\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r4, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 6.05838536s ago: executing program 1 (id=452): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 4.967338583s ago: executing program 3 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2214801, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x9) 3.885267205s ago: executing program 3 (id=454): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3.671431459s ago: executing program 2 (id=455): r0 = syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x1e) syz_open_dev$MSR(0x0, 0x8001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) open(0x0, 0x145142, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) 3.419024176s ago: executing program 3 (id=456): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file3\x00', 0x100481e, &(0x7f00000022c0)=ANY=[@ANYBLOB='keep_last_dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=cp866,discard,iocharset=cp437,errors=remount-ro,discard,umask=00000000000000000000007,umask=0000000000000003,keep_last_dots,\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb, 0x1505, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, 0x0) close(r3) 3.055200801s ago: executing program 1 (id=457): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x30, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @opaque="65ef83f7775bcf0ddbfa95cc714fe4297b681bd9ed5d1e6f7716fdc67a6967d9817f39d296d8f845"}}}}}}, 0x0) 2.123937618s ago: executing program 3 (id=458): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2000000, &(0x7f0000000000), 0x1, 0x787, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x3f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) gettid() 1.861445724s ago: executing program 1 (id=459): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x20, 0xb, 0x18, "72ec465885156e64cba99997236d63f6d7afcf081cf2c3da"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xcc}, 0x0, 0x0, 0x0}) 1.092617748s ago: executing program 4 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="144c63", 0x3) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x2, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 86.117912][ T5845] cgroup: Unknown subsys name 'net' [ 86.223396][ T5845] cgroup: Unknown subsys name 'cpuset' [ 86.235247][ T5845] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.920163][ T5845] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.236052][ T24] cfg80211: failed to load regulatory.db [ 92.500469][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.514777][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.527799][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.545924][ T5177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.553790][ T5177] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.562748][ T5177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.570908][ T5177] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.592886][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.602498][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.610793][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.624303][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.630507][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.644825][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.651990][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.660263][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.670277][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.677822][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.687749][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.696096][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.708066][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.740271][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.750155][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.760504][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.771540][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.779546][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.779770][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.796511][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.821302][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.829967][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.838462][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.592558][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 93.714648][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 93.738012][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 93.772733][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 93.977196][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.985409][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.992687][ T5863] bridge_slave_0: entered allmulticast mode [ 94.001286][ T5863] bridge_slave_0: entered promiscuous mode [ 94.009468][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 94.052318][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.059706][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.066959][ T5863] bridge_slave_1: entered allmulticast mode [ 94.074739][ T5863] bridge_slave_1: entered promiscuous mode [ 94.108949][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 94.269498][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.277332][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.285075][ T5871] bridge_slave_0: entered allmulticast mode [ 94.292479][ T5871] bridge_slave_0: entered promiscuous mode [ 94.310667][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.317885][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.325413][ T5867] bridge_slave_0: entered allmulticast mode [ 94.333211][ T5867] bridge_slave_0: entered promiscuous mode [ 94.343559][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.356355][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.383256][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.390930][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.398126][ T5877] bridge_slave_0: entered allmulticast mode [ 94.406372][ T5877] bridge_slave_0: entered promiscuous mode [ 94.413636][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.421200][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.428635][ T5871] bridge_slave_1: entered allmulticast mode [ 94.436809][ T5871] bridge_slave_1: entered promiscuous mode [ 94.459896][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.467322][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.474666][ T5867] bridge_slave_1: entered allmulticast mode [ 94.482127][ T5867] bridge_slave_1: entered promiscuous mode [ 94.532110][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.539638][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.546888][ T5877] bridge_slave_1: entered allmulticast mode [ 94.555387][ T5877] bridge_slave_1: entered promiscuous mode [ 94.595136][ T5870] Bluetooth: hci0: command tx timeout [ 94.621072][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.693318][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.732016][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.742821][ T5863] team0: Port device team_slave_0 added [ 94.749086][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.756895][ T5870] Bluetooth: hci3: command tx timeout [ 94.756914][ T5865] Bluetooth: hci1: command tx timeout [ 94.757160][ T5876] Bluetooth: hci2: command tx timeout [ 94.762752][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.773531][ T5866] bridge_slave_0: entered allmulticast mode [ 94.788471][ T5866] bridge_slave_0: entered promiscuous mode [ 94.799115][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.826906][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.839815][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.840680][ T5870] Bluetooth: hci4: command tx timeout [ 94.883171][ T5863] team0: Port device team_slave_1 added [ 94.905360][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.912452][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.920467][ T5866] bridge_slave_1: entered allmulticast mode [ 94.926686][ T5870] Bluetooth: hci5: command tx timeout [ 94.929053][ T5866] bridge_slave_1: entered promiscuous mode [ 95.055804][ T5877] team0: Port device team_slave_0 added [ 95.064733][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.089221][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.096900][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.104222][ T5881] bridge_slave_0: entered allmulticast mode [ 95.111687][ T5881] bridge_slave_0: entered promiscuous mode [ 95.122109][ T5867] team0: Port device team_slave_0 added [ 95.128280][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.135679][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.142832][ T5881] bridge_slave_1: entered allmulticast mode [ 95.150526][ T5881] bridge_slave_1: entered promiscuous mode [ 95.158609][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.165698][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.191665][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.205600][ T5877] team0: Port device team_slave_1 added [ 95.214581][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.225533][ T5871] team0: Port device team_slave_0 added [ 95.233515][ T5867] team0: Port device team_slave_1 added [ 95.269470][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.276804][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.303234][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.368001][ T5871] team0: Port device team_slave_1 added [ 95.407735][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.418576][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.425943][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.452296][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.466793][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.473721][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.499713][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.528777][ T5866] team0: Port device team_slave_0 added [ 95.549497][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.556506][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.582949][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.595496][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.602420][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.629314][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.650726][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.698996][ T5866] team0: Port device team_slave_1 added [ 95.770452][ T5863] hsr_slave_0: entered promiscuous mode [ 95.777090][ T5863] hsr_slave_1: entered promiscuous mode [ 95.785962][ T5881] team0: Port device team_slave_0 added [ 95.823478][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.830510][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.856491][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.870351][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.877371][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.904954][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.942373][ T5881] team0: Port device team_slave_1 added [ 95.949101][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.956800][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.983019][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.090576][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.097660][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.125371][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.142996][ T5867] hsr_slave_0: entered promiscuous mode [ 96.149579][ T5867] hsr_slave_1: entered promiscuous mode [ 96.155864][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 96.161634][ T5867] Cannot create hsr debugfs directory [ 96.189019][ T5877] hsr_slave_0: entered promiscuous mode [ 96.196078][ T5877] hsr_slave_1: entered promiscuous mode [ 96.202211][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 96.208670][ T5877] Cannot create hsr debugfs directory [ 96.267245][ T5871] hsr_slave_0: entered promiscuous mode [ 96.273638][ T5871] hsr_slave_1: entered promiscuous mode [ 96.281065][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 96.286830][ T5871] Cannot create hsr debugfs directory [ 96.316443][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.323391][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.349733][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.437757][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.444817][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.473307][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.505075][ T5866] hsr_slave_0: entered promiscuous mode [ 96.511657][ T5866] hsr_slave_1: entered promiscuous mode [ 96.518394][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 96.524216][ T5866] Cannot create hsr debugfs directory [ 96.674600][ T5870] Bluetooth: hci0: command tx timeout [ 96.830274][ T5881] hsr_slave_0: entered promiscuous mode [ 96.836013][ T5870] Bluetooth: hci3: command tx timeout [ 96.836063][ T5870] Bluetooth: hci2: command tx timeout [ 96.844139][ T5876] Bluetooth: hci1: command tx timeout [ 96.848255][ T5881] hsr_slave_1: entered promiscuous mode [ 96.858615][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 96.864790][ T5881] Cannot create hsr debugfs directory [ 96.914232][ T5876] Bluetooth: hci4: command tx timeout [ 97.005020][ T5876] Bluetooth: hci5: command tx timeout [ 97.235861][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.250413][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.281462][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.315653][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.402309][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.425121][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.459984][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.470548][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.519811][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.547113][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.576345][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.587152][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.696058][ T5877] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.726135][ T5877] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.770954][ T5877] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.796269][ T5877] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.858065][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.872131][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.885927][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.897473][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.912352][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.943520][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.965863][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.017084][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.024345][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.057654][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.070210][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.077373][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.121937][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.129092][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.174426][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.181563][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.205562][ T5881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.237975][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.255951][ T5881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.268077][ T5881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.298964][ T5881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.332276][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.380467][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.387633][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.446541][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.453685][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.588032][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.622873][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.687390][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.713678][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.741439][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.754530][ T5876] Bluetooth: hci0: command tx timeout [ 98.772159][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.779348][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.829454][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.836631][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.866694][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.873825][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.897298][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.904463][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.915705][ T5876] Bluetooth: hci1: command tx timeout [ 98.921109][ T5876] Bluetooth: hci2: command tx timeout [ 98.926611][ T5876] Bluetooth: hci3: command tx timeout [ 98.981474][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.002948][ T5870] Bluetooth: hci4: command tx timeout [ 99.028443][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.076927][ T5870] Bluetooth: hci5: command tx timeout [ 99.170689][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.194848][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.217862][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.225076][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.268215][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.275406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.316107][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.424875][ T5863] veth0_vlan: entered promiscuous mode [ 99.511191][ T5881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.560806][ T5863] veth1_vlan: entered promiscuous mode [ 99.651976][ T5867] veth0_vlan: entered promiscuous mode [ 99.671480][ T5871] veth0_vlan: entered promiscuous mode [ 99.741242][ T5867] veth1_vlan: entered promiscuous mode [ 99.780832][ T5871] veth1_vlan: entered promiscuous mode [ 99.801815][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.826152][ T5863] veth0_macvtap: entered promiscuous mode [ 99.878570][ T5863] veth1_macvtap: entered promiscuous mode [ 99.918255][ T5867] veth0_macvtap: entered promiscuous mode [ 99.966598][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.979218][ T5867] veth1_macvtap: entered promiscuous mode [ 100.060381][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.079562][ T5866] veth0_vlan: entered promiscuous mode [ 100.096679][ T5871] veth0_macvtap: entered promiscuous mode [ 100.106735][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.131756][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.163104][ T5871] veth1_macvtap: entered promiscuous mode [ 100.222029][ T5866] veth1_vlan: entered promiscuous mode [ 100.255063][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.297669][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.322384][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.336975][ T1102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.346945][ T1102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.369533][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.429323][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.466613][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.511918][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.597208][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.610652][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.644943][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.653769][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.702281][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.711537][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.721367][ T5866] veth0_macvtap: entered promiscuous mode [ 100.734369][ T5866] veth1_macvtap: entered promiscuous mode [ 100.760417][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.808846][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.821402][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.834294][ T5870] Bluetooth: hci0: command tx timeout [ 100.839146][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.842151][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.893070][ T1094] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.915524][ T1094] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.924489][ T1094] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.953876][ T1094] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.979257][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.987915][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.996930][ T5876] Bluetooth: hci2: command tx timeout [ 101.002366][ T5876] Bluetooth: hci1: command tx timeout [ 101.010939][ T5870] Bluetooth: hci3: command tx timeout [ 101.080102][ T5870] Bluetooth: hci4: command tx timeout [ 101.117179][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.129325][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.145975][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.151678][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.164121][ T5870] Bluetooth: hci5: command tx timeout [ 101.184745][ T5877] veth0_vlan: entered promiscuous mode [ 101.185775][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.236219][ T5881] veth0_vlan: entered promiscuous mode [ 101.282843][ T5877] veth1_vlan: entered promiscuous mode [ 101.316473][ T5881] veth1_vlan: entered promiscuous mode [ 101.381487][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.410977][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.464305][ T6001] sctp: [Deprecated]: syz.1.2 (pid 6001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.464305][ T6001] Use struct sctp_sack_info instead [ 101.961251][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.971247][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.003438][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.017774][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.106935][ T5877] veth0_macvtap: entered promiscuous mode [ 102.138265][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.167838][ T5881] veth0_macvtap: entered promiscuous mode [ 102.233938][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.267966][ T5881] veth1_macvtap: entered promiscuous mode [ 102.306393][ T5877] veth1_macvtap: entered promiscuous mode [ 102.388067][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.406833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 102.495860][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.540415][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.578872][ T6011] ./file0: Can't lookup blockdev [ 102.638236][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.661077][ T1094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.710920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.719547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.837400][ T6013] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4'. [ 103.018238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.120688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.530316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.632553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.837499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.042184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.123664][ T1094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.144646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 104.393723][ T1094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.446305][ T1094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.648065][ T1094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.330994][ T1094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.454388][ T1094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.505337][ T1094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.645052][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.669568][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.823158][ T6033] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10'. [ 107.143239][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.173832][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.214312][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.222155][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.775117][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.782962][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.989813][ T6056] netlink: 88 bytes leftover after parsing attributes in process `syz.3.16'. [ 112.760899][ T6069] ./file0: Can't lookup blockdev [ 114.948128][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.161913][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.366323][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.262478][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.975220][ T6105] netlink: 76 bytes leftover after parsing attributes in process `syz.3.28'. [ 124.852264][ T6125] program syz.2.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.562360][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 131.526359][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.871814][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.884132][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.892000][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.902573][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.214570][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.221257][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.482750][ T49] bridge_slave_1: left allmulticast mode [ 132.496432][ T49] bridge_slave_1: left promiscuous mode [ 132.531103][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.642366][ T49] bridge_slave_0: left allmulticast mode [ 132.703017][ T49] bridge_slave_0: left promiscuous mode [ 132.728462][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.335732][ T5876] Bluetooth: hci2: command tx timeout [ 135.281537][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.851443][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.889849][ T49] bond0 (unregistering): Released all slaves [ 136.348424][ T6196] netlink: 300 bytes leftover after parsing attributes in process `syz.2.52'. [ 136.357654][ T5876] Bluetooth: hci2: command tx timeout [ 136.550192][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.51'. [ 137.064372][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.074576][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.094096][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.154467][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.174895][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.389337][ T5876] Bluetooth: hci2: command tx timeout [ 139.395445][ T5870] Bluetooth: hci4: command tx timeout [ 139.913382][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 143.324071][ T5876] Bluetooth: hci2: command tx timeout [ 143.329491][ T5876] Bluetooth: hci4: command tx timeout [ 145.486566][ T5876] Bluetooth: hci4: command tx timeout [ 145.612788][ T6259] fuse: Bad value for 'fd' [ 145.672698][ T49] hsr_slave_0: left promiscuous mode [ 145.712933][ T49] hsr_slave_1: left promiscuous mode [ 145.779298][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.835757][ T6266] ./file0: Can't lookup blockdev [ 145.870086][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.945161][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.985447][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.205938][ T49] veth1_macvtap: left promiscuous mode [ 146.229807][ T49] veth0_macvtap: left promiscuous mode [ 146.320719][ T49] veth1_vlan: left promiscuous mode [ 146.364407][ T49] veth0_vlan: left promiscuous mode [ 147.605694][ T5876] Bluetooth: hci4: command tx timeout [ 148.154968][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 148.390443][ T10] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 148.430059][ T10] usb 2-1: config 0 has no interface number 0 [ 148.518591][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 148.556751][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.600343][ T10] usb 2-1: Product: syz [ 148.618719][ T10] usb 2-1: Manufacturer: syz [ 148.626480][ T10] usb 2-1: SerialNumber: syz [ 148.739245][ T10] usb 2-1: config 0 descriptor?? [ 149.627937][ T6292] netlink: 292 bytes leftover after parsing attributes in process `syz.4.71'. [ 150.227905][ T6300] ./file0: Can't lookup blockdev [ 150.417018][ T49] team0 (unregistering): Port device team_slave_1 removed [ 150.694746][ T49] team0 (unregistering): Port device team_slave_0 removed [ 152.465201][ T10] snd_usb_variax 2-1:0.113: Line 6 Variax Workbench found [ 152.488826][ T10] usb 2-1: selecting invalid altsetting 1 [ 152.535938][ T10] snd_usb_variax 2-1:0.113: set_interface failed [ 152.548726][ T10] snd_usb_variax 2-1:0.113: Line 6 Variax Workbench now disconnected [ 152.593293][ T10] snd_usb_variax 2-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 152.701995][ T10] usb 2-1: USB disconnect, device number 2 [ 152.791003][ T6317] trusted_key: encrypted_key: insufficient parameters specified [ 153.761020][ T6325] netlink: 76 bytes leftover after parsing attributes in process `syz.4.80'. [ 155.176510][ T6332] trusted_key: encrypted_key: insufficient parameters specified [ 156.325368][ T6159] chnl_net:caif_netlink_parms(): no params data found [ 156.482125][ T6358] netlink: 292 bytes leftover after parsing attributes in process `syz.3.84'. [ 157.097659][ T6203] chnl_net:caif_netlink_parms(): no params data found [ 157.724634][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.145899][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.220020][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.240770][ T6159] bridge_slave_0: entered allmulticast mode [ 158.261535][ T6159] bridge_slave_0: entered promiscuous mode [ 158.276420][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.283799][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.291499][ T6159] bridge_slave_1: entered allmulticast mode [ 158.862148][ T6159] bridge_slave_1: entered promiscuous mode [ 158.988385][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.280079][ T6159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.617463][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.070374][ T6159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.109337][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.126203][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.141670][ T6203] bridge_slave_0: entered allmulticast mode [ 160.307354][ T6203] bridge_slave_0: entered promiscuous mode [ 160.324854][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.332016][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.584865][ T6203] bridge_slave_1: entered allmulticast mode [ 160.734144][ T6203] bridge_slave_1: entered promiscuous mode [ 160.826165][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.261964][ T6159] team0: Port device team_slave_0 added [ 161.316273][ T6159] team0: Port device team_slave_1 added [ 161.414751][ T6403] misc userio: No port type given on /dev/userio [ 161.470569][ T6203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.266872][ T6409] trusted_key: encrypted_key: insufficient parameters specified [ 162.807812][ T6203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.063325][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.116380][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.162519][ T6424] overlayfs: failed to resolve './file1': -2 [ 165.065351][ T6159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.157113][ T6427] netlink: 292 bytes leftover after parsing attributes in process `syz.2.96'. [ 165.496949][ T6203] team0: Port device team_slave_0 added [ 165.581805][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.591458][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.827024][ T6159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.964284][ T6441] fuse: Bad value for 'fd' [ 166.004670][ T6441] ./file0: Can't lookup blockdev [ 166.045828][ T6203] team0: Port device team_slave_1 added [ 167.566226][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.593285][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.689235][ T6203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.781151][ T6159] hsr_slave_0: entered promiscuous mode [ 167.888829][ T6159] hsr_slave_1: entered promiscuous mode [ 168.000200][ T6159] debugfs: 'hsr0' already exists in 'hsr' [ 168.075428][ T6159] Cannot create hsr debugfs directory [ 168.110770][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.124156][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.158954][ T6203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.180676][ T49] bridge_slave_1: left allmulticast mode [ 168.186392][ T49] bridge_slave_1: left promiscuous mode [ 168.192470][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.220258][ T49] bridge_slave_0: left allmulticast mode [ 168.226627][ T49] bridge_slave_0: left promiscuous mode [ 168.235827][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.533091][ T6462] netlink: 300 bytes leftover after parsing attributes in process `syz.4.109'. [ 171.494380][ T6468] netlink: 272 bytes leftover after parsing attributes in process `syz.2.110'. [ 171.945609][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.984526][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.013228][ T49] bond0 (unregistering): Released all slaves [ 173.020165][ T6482] vivid-003: ================= START STATUS ================= [ 173.030325][ T6482] vivid-003: Radio HW Seek Mode: Bounded [ 173.036726][ T6482] vivid-003: Radio Programmable HW Seek: false [ 173.043285][ T6482] vivid-003: RDS Rx I/O Mode: Block I/O [ 173.053068][ T6482] vivid-003: Generate RBDS Instead of RDS: false [ 173.078087][ T6482] vivid-003: RDS Reception: true [ 173.125546][ T6482] vivid-003: RDS Program Type: 0 inactive [ 173.131433][ T6482] vivid-003: RDS PS Name: inactive [ 173.140455][ T6482] vivid-003: RDS Radio Text: inactive [ 173.146848][ T6482] vivid-003: RDS Traffic Announcement: false inactive [ 173.179746][ T6482] vivid-003: RDS Traffic Program: false inactive [ 173.240381][ T6482] vivid-003: RDS Music: false inactive [ 173.249038][ T6482] vivid-003: ================== END STATUS ================== [ 175.303583][ T6496] trusted_key: encrypted_key: insufficient parameters specified [ 175.821716][ T6203] hsr_slave_0: entered promiscuous mode [ 176.845086][ T6203] hsr_slave_1: entered promiscuous mode [ 176.853431][ T6203] debugfs: 'hsr0' already exists in 'hsr' [ 177.720454][ T6203] Cannot create hsr debugfs directory [ 178.605050][ T5870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.616266][ T5870] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.624340][ T5870] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.641678][ T5870] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.649343][ T5870] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.119864][ T6523] trusted_key: encrypted_key: insufficient parameters specified [ 180.901909][ T5876] Bluetooth: hci6: command tx timeout [ 181.178206][ T6538] Zero length message leads to an empty skb [ 182.551250][ T49] hsr_slave_0: left promiscuous mode [ 182.630428][ T49] hsr_slave_1: left promiscuous mode [ 183.436889][ T5876] Bluetooth: hci6: command tx timeout [ 183.452215][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.822416][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.910087][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.384036][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.474227][ T6560] netlink: 300 bytes leftover after parsing attributes in process `syz.2.134'. [ 185.075095][ T49] veth1_macvtap: left promiscuous mode [ 185.080665][ T49] veth0_macvtap: left promiscuous mode [ 185.187508][ T49] veth1_vlan: left promiscuous mode [ 185.381926][ T49] veth0_vlan: left promiscuous mode [ 185.474199][ T5876] Bluetooth: hci6: command tx timeout [ 186.250506][ T6574] netlink: 76 bytes leftover after parsing attributes in process `syz.4.138'. [ 187.320484][ T6579] misc userio: No port type given on /dev/userio [ 187.552170][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 187.564076][ T5876] Bluetooth: hci6: command tx timeout [ 189.998796][ T49] team0 (unregistering): Port device team_slave_1 removed [ 190.059296][ T49] team0 (unregistering): Port device team_slave_0 removed [ 192.887806][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 195.594617][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.600951][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.631269][ T6620] gtp0: entered promiscuous mode [ 195.732627][ T6630] misc userio: No port type given on /dev/userio [ 202.364368][ T1102] bridge_slave_1: left allmulticast mode [ 202.370042][ T1102] bridge_slave_1: left promiscuous mode [ 202.426500][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.560655][ T6666] trusted_key: encrypted_key: insufficient parameters specified [ 203.038090][ T1102] bridge_slave_0: left allmulticast mode [ 203.043794][ T1102] bridge_slave_0: left promiscuous mode [ 203.102768][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.473082][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.609397][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.629750][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.659597][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.687126][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.748084][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.125132][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.333455][ T1102] bond0 (unregistering): Released all slaves [ 205.905501][ T5870] Bluetooth: hci2: command tx timeout [ 206.221822][ T6515] chnl_net:caif_netlink_parms(): no params data found [ 206.320149][ T1102] hsr_slave_0: left promiscuous mode [ 206.408690][ T6701] misc userio: No port type given on /dev/userio [ 206.417557][ T1102] hsr_slave_1: left promiscuous mode [ 206.489739][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.582586][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.885950][ T6702] misc userio: No port type given on /dev/userio [ 207.954119][ T5870] Bluetooth: hci2: command tx timeout [ 208.880318][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 210.059940][ T5870] Bluetooth: hci2: command tx timeout [ 210.594645][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 212.204047][ T5870] Bluetooth: hci2: command tx timeout [ 213.273090][ T6732] sctp: [Deprecated]: syz.2.169 (pid 6732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.273090][ T6732] Use struct sctp_sack_info instead [ 214.152389][ T6739] trusted_key: encrypted_key: insufficient parameters specified [ 214.388304][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'. [ 214.706354][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.721869][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.755169][ T6515] bridge_slave_0: entered allmulticast mode [ 214.764522][ T6515] bridge_slave_0: entered promiscuous mode [ 214.934532][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.942961][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.951267][ T6515] bridge_slave_1: entered allmulticast mode [ 214.959586][ T6515] bridge_slave_1: entered promiscuous mode [ 215.099063][ T6515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.192490][ T6515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.953800][ T6515] team0: Port device team_slave_0 added [ 216.042648][ T6515] team0: Port device team_slave_1 added [ 216.511053][ T5177] Bluetooth: hci0: command 0x0406 tx timeout [ 216.517255][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 216.523287][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 216.530473][ T5177] Bluetooth: hci5: command 0x0406 tx timeout [ 216.928355][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.954836][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.078085][ T6515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.116199][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.155496][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.241228][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.485205][ T6671] chnl_net:caif_netlink_parms(): no params data found [ 218.305803][ T1102] bridge_slave_1: left allmulticast mode [ 218.311484][ T1102] bridge_slave_1: left promiscuous mode [ 218.318173][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.404240][ T1102] bridge_slave_0: left allmulticast mode [ 218.414204][ T1102] bridge_slave_0: left promiscuous mode [ 218.419979][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.198273][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.214279][ T6791] fuse: Bad value for 'group_id' [ 219.219220][ T6791] fuse: Bad value for 'group_id' [ 219.249408][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.275460][ T1102] bond0 (unregistering): Released all slaves [ 219.627716][ T6798] trusted_key: encrypted_key: insufficient parameters specified [ 220.133817][ T6515] hsr_slave_0: entered promiscuous mode [ 220.915791][ T6515] hsr_slave_1: entered promiscuous mode [ 220.922131][ T6515] debugfs: 'hsr0' already exists in 'hsr' [ 221.184197][ T6515] Cannot create hsr debugfs directory [ 221.538953][ T1102] hsr_slave_0: left promiscuous mode [ 221.633693][ T1102] hsr_slave_1: left promiscuous mode [ 221.772985][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.168701][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.334827][ T6003] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 223.317209][ T6819] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 224.551036][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 224.614318][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 224.924578][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 226.238750][ T5953] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 226.662844][ T6799] gtp0: entered promiscuous mode [ 226.706165][ T5953] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 226.735737][ T6826] gtp0: entered promiscuous mode [ 226.767058][ T5953] usb 4-1: config 0 has no interface number 0 [ 226.814324][ T5953] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 226.829788][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.870325][ T6003] usb 3-1: device descriptor read/all, error -71 [ 226.889808][ T5953] usb 4-1: Product: syz [ 227.109399][ T5953] usb 4-1: Manufacturer: syz [ 227.129041][ T5953] usb 4-1: SerialNumber: syz [ 227.159078][ T5953] usb 4-1: config 0 descriptor?? [ 227.602555][ T6671] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.614869][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.622337][ T6671] bridge_slave_0: entered allmulticast mode [ 227.631254][ T6671] bridge_slave_0: entered promiscuous mode [ 227.682198][ T5953] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench found [ 227.721992][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.738675][ T5953] usb 4-1: selecting invalid altsetting 1 [ 227.764520][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.771747][ T5953] snd_usb_variax 4-1:0.113: set_interface failed [ 228.754745][ T5953] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench now disconnected [ 228.780819][ T5953] snd_usb_variax 4-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 228.793659][ T6671] bridge_slave_1: entered allmulticast mode [ 228.834131][ T6671] bridge_slave_1: entered promiscuous mode [ 229.420362][ T5953] usb 4-1: USB disconnect, device number 2 [ 230.488030][ T6671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.810902][ T6671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.331531][ T6671] team0: Port device team_slave_0 added [ 231.337558][ T6864] netlink: 204 bytes leftover after parsing attributes in process `syz.3.200'. [ 231.349166][ T6671] team0: Port device team_slave_1 added [ 231.403101][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 231.604070][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.638016][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.807331][ T6671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.725656][ T6877] netlink: 76 bytes leftover after parsing attributes in process `syz.3.203'. [ 235.065054][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.072072][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.098029][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.445156][ T6671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.820944][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 236.863556][ T6879] gtp0: entered promiscuous mode [ 237.615597][ T6671] hsr_slave_0: entered promiscuous mode [ 237.629716][ T6671] hsr_slave_1: entered promiscuous mode [ 237.656180][ T6671] debugfs: 'hsr0' already exists in 'hsr' [ 237.865882][ T6671] Cannot create hsr debugfs directory [ 238.705010][ T6908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.208'. [ 239.567368][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.575961][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.583716][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.592207][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.621917][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.907438][ T6936] netlink: 204 bytes leftover after parsing attributes in process `syz.1.213'. [ 240.469054][ T6943] netlink: 76 bytes leftover after parsing attributes in process `syz.1.214'. [ 241.774837][ T51] Bluetooth: hci4: command tx timeout [ 243.794502][ T51] Bluetooth: hci4: command tx timeout [ 244.041133][ T6959] gtp0: entered promiscuous mode [ 244.083813][ T6671] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 244.174111][ T5954] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 244.254476][ T6671] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 244.366244][ T5954] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 244.386314][ T5954] usb 4-1: config 0 has no interface number 0 [ 244.413125][ T5954] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 244.422901][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.431424][ T5954] usb 4-1: Product: syz [ 244.441688][ T5954] usb 4-1: Manufacturer: syz [ 244.446600][ T5954] usb 4-1: SerialNumber: syz [ 244.456310][ T5954] usb 4-1: config 0 descriptor?? [ 244.540810][ T6671] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 244.780824][ T6671] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 244.802970][ T5954] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench found [ 244.831000][ T5954] usb 4-1: selecting invalid altsetting 1 [ 244.869684][ T5954] snd_usb_variax 4-1:0.113: set_interface failed [ 244.884437][ T5954] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench now disconnected [ 244.933516][ T5954] snd_usb_variax 4-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 244.979571][ T5954] usb 4-1: USB disconnect, device number 3 [ 245.095068][ T6928] chnl_net:caif_netlink_parms(): no params data found [ 245.924622][ T51] Bluetooth: hci4: command tx timeout [ 247.067358][ T7005] netlink: 204 bytes leftover after parsing attributes in process `syz.2.224'. [ 247.167762][ T6928] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.200539][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.226523][ T6928] bridge_slave_0: entered allmulticast mode [ 247.264290][ T6928] bridge_slave_0: entered promiscuous mode [ 247.313118][ T6928] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.350489][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.520705][ T6928] bridge_slave_1: entered allmulticast mode [ 247.528840][ T6928] bridge_slave_1: entered promiscuous mode [ 247.955075][ T51] Bluetooth: hci4: command tx timeout [ 248.518632][ T6928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.650233][ T6928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.809190][ T1102] bridge_slave_1: left allmulticast mode [ 248.853607][ T1102] bridge_slave_1: left promiscuous mode [ 248.888677][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.938554][ T1102] bridge_slave_0: left allmulticast mode [ 248.975966][ T1102] bridge_slave_0: left promiscuous mode [ 248.994177][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.113100][ T7029] fuse: Bad value for 'fd' [ 249.136703][ T7029] ./file0: Can't lookup blockdev [ 250.092831][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.170688][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.294070][ T1102] bond0 (unregistering): Released all slaves [ 250.964767][ T6928] team0: Port device team_slave_0 added [ 250.978348][ T6928] team0: Port device team_slave_1 added [ 251.364219][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 251.500415][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.521085][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.557293][ T24] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 251.588400][ T6928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.604498][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.611721][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.663476][ T6928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.688736][ T24] usb 4-1: config 0 has no interface number 0 [ 251.724000][ T1102] hsr_slave_0: left promiscuous mode [ 251.737429][ T24] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 251.754212][ T1102] hsr_slave_1: left promiscuous mode [ 251.790898][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.804444][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.813110][ T24] usb 4-1: Product: syz [ 251.819133][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.854144][ T24] usb 4-1: Manufacturer: syz [ 251.858907][ T24] usb 4-1: SerialNumber: syz [ 251.894826][ T24] usb 4-1: config 0 descriptor?? [ 252.044652][ T7047] netlink: 300 bytes leftover after parsing attributes in process `syz.2.235'. [ 252.495321][ T24] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench found [ 252.502488][ T24] usb 4-1: selecting invalid altsetting 1 [ 252.530212][ T24] snd_usb_variax 4-1:0.113: set_interface failed [ 252.562453][ T24] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench now disconnected [ 252.599529][ T24] snd_usb_variax 4-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 252.640427][ T24] usb 4-1: USB disconnect, device number 4 [ 254.132106][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 254.235091][ T7055] misc userio: No port type given on /dev/userio [ 254.787609][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 255.366590][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.414182][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.008879][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 259.944283][ T5847] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 260.169948][ T5847] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 260.388745][ T5847] usb 2-1: config 0 has no interface number 0 [ 260.415536][ T6928] hsr_slave_0: entered promiscuous mode [ 260.435710][ T5847] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 260.467631][ T6928] hsr_slave_1: entered promiscuous mode [ 260.494037][ T6003] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 260.494166][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.514584][ T6928] debugfs: 'hsr0' already exists in 'hsr' [ 260.520339][ T6928] Cannot create hsr debugfs directory [ 260.591364][ T5847] usb 2-1: Product: syz [ 260.625919][ T5847] usb 2-1: Manufacturer: syz [ 260.646835][ T5847] usb 2-1: SerialNumber: syz [ 260.692293][ T5847] usb 2-1: config 0 descriptor?? [ 260.844714][ T6003] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 260.852921][ T6003] usb 4-1: config 0 has no interface number 0 [ 261.278277][ T5847] snd_usb_variax 2-1:0.113: Line 6 Variax Workbench found [ 261.308700][ T5847] usb 2-1: selecting invalid altsetting 1 [ 261.311156][ T6003] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 261.326077][ T5847] snd_usb_variax 2-1:0.113: set_interface failed [ 261.343457][ T5847] snd_usb_variax 2-1:0.113: Line 6 Variax Workbench now disconnected [ 261.354935][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.355187][ T5847] snd_usb_variax 2-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 261.416203][ T5847] usb 2-1: USB disconnect, device number 4 [ 261.449737][ T6003] usb 4-1: Product: syz [ 261.458780][ T6003] usb 4-1: Manufacturer: syz [ 261.471263][ T6003] usb 4-1: SerialNumber: syz [ 261.555061][ T5870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 261.564981][ T5870] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 261.572972][ T5870] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 261.581056][ T5870] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 261.589023][ T5870] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.607493][ T6003] usb 4-1: config 0 descriptor?? [ 261.821347][ T6003] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench found [ 261.848931][ T6003] usb 4-1: selecting invalid altsetting 1 [ 261.875993][ T6003] snd_usb_variax 4-1:0.113: set_interface failed [ 261.906335][ T6003] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench now disconnected [ 261.936317][ T6003] snd_usb_variax 4-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 261.996194][ T6003] usb 4-1: USB disconnect, device number 5 [ 263.639712][ T51] Bluetooth: hci6: command tx timeout [ 264.485649][ T7137] misc userio: No port type given on /dev/userio [ 265.721278][ T51] Bluetooth: hci6: command tx timeout [ 267.794144][ T51] Bluetooth: hci6: command tx timeout [ 268.441258][ T7106] chnl_net:caif_netlink_parms(): no params data found [ 270.901086][ T5870] Bluetooth: hci6: command tx timeout [ 271.530570][ T1102] bridge_slave_1: left allmulticast mode [ 271.554088][ T51] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 271.554285][ T5870] Bluetooth: hci2: command 0x1003 tx timeout [ 271.566407][ T1102] bridge_slave_1: left promiscuous mode [ 271.566747][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.683216][ T6003] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 271.758529][ T1102] bridge_slave_0: left allmulticast mode [ 271.784790][ T1102] bridge_slave_0: left promiscuous mode [ 271.790571][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.906769][ T6003] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 271.915261][ T6003] usb 4-1: config 0 has no interface number 0 [ 271.949315][ T6003] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 271.966207][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.025235][ T6003] usb 4-1: Product: syz [ 272.034183][ T6003] usb 4-1: Manufacturer: syz [ 272.049392][ T6003] usb 4-1: SerialNumber: syz [ 272.139405][ T6003] usb 4-1: config 0 descriptor?? [ 274.637648][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.672985][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.828415][ T1102] bond0 (unregistering): Released all slaves [ 275.307081][ T6928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.373381][ T6003] usb 4-1: can't set config #0, error -71 [ 275.380862][ T6003] usb 4-1: USB disconnect, device number 6 [ 275.797631][ T7226] fuse: Bad value for 'fd' [ 275.910309][ T7226] ./file0: Can't lookup blockdev [ 275.952535][ T1102] hsr_slave_0: left promiscuous mode [ 276.053157][ T7227] netlink: 300 bytes leftover after parsing attributes in process `syz.1.274'. [ 276.054441][ T1102] hsr_slave_1: left promiscuous mode [ 276.968891][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.014777][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.881065][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 281.162963][ T7260] netlink: 76 bytes leftover after parsing attributes in process `syz.2.283'. [ 282.065409][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 282.707267][ T7274] netlink: 300 bytes leftover after parsing attributes in process `syz.1.287'. [ 283.693779][ T5954] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 283.721660][ T6928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.881936][ T5954] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 283.890734][ T5954] usb 4-1: config 0 has no interface number 0 [ 283.912386][ T6928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.915431][ T5954] usb 4-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 284.452001][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.460239][ T5954] usb 4-1: Product: syz [ 284.464587][ T5954] usb 4-1: Manufacturer: syz [ 284.469183][ T5954] usb 4-1: SerialNumber: syz [ 284.519598][ T6928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 284.547235][ T5954] usb 4-1: config 0 descriptor?? [ 284.707689][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.734966][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.768188][ T7106] bridge_slave_0: entered allmulticast mode [ 284.803236][ T5954] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench found [ 284.823176][ T5954] usb 4-1: selecting invalid altsetting 1 [ 284.885342][ T7106] bridge_slave_0: entered promiscuous mode [ 284.998425][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.038200][ T5954] snd_usb_variax 4-1:0.113: set_interface failed [ 285.054271][ T5954] snd_usb_variax 4-1:0.113: Line 6 Variax Workbench now disconnected [ 285.789074][ T5954] snd_usb_variax 4-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 285.815014][ T5954] usb 4-1: USB disconnect, device number 7 [ 285.837093][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.900096][ T7106] bridge_slave_1: entered allmulticast mode [ 285.932074][ T7106] bridge_slave_1: entered promiscuous mode [ 287.924971][ T7106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.422111][ T7106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.827091][ T7327] syz.3.299 uses obsolete (PF_INET,SOCK_PACKET) [ 291.187021][ T7106] team0: Port device team_slave_0 added [ 291.224439][ T7106] team0: Port device team_slave_1 added [ 291.661522][ T7342] trusted_key: encrypted_key: insufficient parameters specified [ 292.400043][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.418658][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.445689][ T7106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.481153][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.517586][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.554018][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 292.594390][ T7350] input: syz0 as /devices/virtual/input/input8 [ 292.629464][ T7106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.752203][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.780387][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 292.815348][ T24] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 292.834041][ T24] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 292.842208][ T24] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 292.883316][ T24] usb 3-1: config 129 has no interface number 0 [ 292.928810][ T24] usb 3-1: config 129 has no interface number 1 [ 292.959305][ T24] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 292.980529][ T7362] loop1: detected capacity change from 0 to 2048 [ 292.991502][ T7106] hsr_slave_0: entered promiscuous mode [ 293.003130][ T24] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 293.020714][ T24] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 293.038790][ T7106] hsr_slave_1: entered promiscuous mode [ 293.058486][ T7106] debugfs: 'hsr0' already exists in 'hsr' [ 293.066044][ T7362] udf: Unknown parameter 'nostr' [ 293.090528][ T7106] Cannot create hsr debugfs directory [ 293.159950][ T5932] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 293.238744][ T6928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.314853][ T24] usb 3-1: config 129 interface 135 has no altsetting 0 [ 293.327352][ T6070] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 293.333950][ T24] usb 3-1: config 129 interface 5 has no altsetting 0 [ 293.344769][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 293.357416][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 293.362764][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.370895][ T24] usb 3-1: Product: syz [ 293.375152][ T24] usb 3-1: Manufacturer: syz [ 293.380310][ T24] usb 3-1: SerialNumber: syz [ 293.405900][ T5932] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 293.413547][ T6928] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.423224][ T5932] usb 4-1: config 179 has no interface number 0 [ 293.446280][ T5932] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 293.654829][ T6070] usb 5-1: Using ep0 maxpacket: 32 [ 293.889615][ T5932] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 293.993390][ T6070] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 294.010401][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 294.026600][ T5932] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 294.040540][ T24] usb 3-1: MIDIStreaming interface descriptor not found [ 294.043943][ T6070] usb 5-1: config 0 has no interface number 0 [ 294.062958][ T6070] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.081045][ T5932] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 294.111725][ T6070] usb 5-1: config 0 interface 85 has no altsetting 0 [ 294.119340][ T24] usb 3-1: USB disconnect, device number 4 [ 294.124381][ T5932] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 294.147516][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.154668][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.213524][ T6070] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 294.222930][ T5932] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 294.243939][ T6070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.284950][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.295908][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.303043][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.318000][ T6070] usb 5-1: Product: syz [ 294.344418][ T6070] usb 5-1: Manufacturer: syz [ 294.349022][ T6070] usb 5-1: SerialNumber: syz [ 294.364322][ T7361] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 294.422550][ T6070] usb 5-1: config 0 descriptor?? [ 295.675658][ T7375] binder: 7374:7375 ioctl c0306201 0 returned -14 [ 295.786255][ T5953] usb 4-1: USB disconnect, device number 8 [ 295.786264][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 295.801022][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 297.873619][ T6070] appletouch 5-1:0.85: Failed to request geyser raw mode [ 297.898490][ T6070] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 297.930091][ T7380] loop2: detected capacity change from 0 to 1024 [ 297.974930][ T7380] ======================================================= [ 297.974930][ T7380] WARNING: The mand mount option has been deprecated and [ 297.974930][ T7380] and is ignored by this kernel. Remove the mand [ 297.974930][ T7380] option from the mount to silence this warning. [ 297.974930][ T7380] ======================================================= [ 297.995672][ T6070] usb 5-1: USB disconnect, device number 2 [ 298.161402][ T7380] EXT4-fs: Ignoring removed nobh option [ 298.254089][ T7380] EXT4-fs: Ignoring removed bh option [ 298.309830][ T7387] loop1: detected capacity change from 0 to 256 [ 298.889911][ T7387] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.988244][ T7380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.206044][ T7397] IPVS: set_ctl: invalid protocol: 12 172.30.1.3:20001 [ 299.627168][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.926384][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.944452][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.952540][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.965537][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.982346][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.251525][ T7419] loop1: detected capacity change from 0 to 256 [ 302.060194][ T5870] Bluetooth: hci2: command tx timeout [ 302.313634][ T7419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 302.405538][ T7419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 302.494759][ T7419] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 302.534018][ T7419] UDF-fs: Scanning with blocksize 512 failed [ 302.573739][ T7419] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 302.587410][ T7426] syz_tun: entered promiscuous mode [ 302.691937][ T7419] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.890283][ T30] audit: type=1326 audit(1755203230.388:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.1.319" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba99d8ebe9 code=0x0 [ 302.988276][ T7429] loop4: detected capacity change from 0 to 1024 [ 303.784292][ T7106] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 304.042928][ T7106] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 304.103540][ T7106] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 304.184241][ T5946] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 304.197676][ T5870] Bluetooth: hci2: command tx timeout [ 304.219066][ T7106] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 304.238740][ T7448] loop2: detected capacity change from 0 to 1024 [ 304.305570][ T7448] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.322: bad orphan inode 32767 [ 304.393953][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 304.405338][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.417963][ T5946] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 304.428787][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.445848][ T7448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.488727][ T7412] chnl_net:caif_netlink_parms(): no params data found [ 304.506548][ T5946] usb 2-1: config 0 descriptor?? [ 305.787104][ T5946] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 305.900583][ T5946] hid-multitouch 0003:0EEF:72C4.0001: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 306.030212][ T5946] usb 2-1: USB disconnect, device number 5 [ 306.065548][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'. [ 306.158442][ T7472] fido_id[7472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 306.185373][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.207249][ T49] bridge_slave_1: left allmulticast mode [ 306.212898][ T49] bridge_slave_1: left promiscuous mode [ 306.227257][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.253208][ T49] bridge_slave_0: left allmulticast mode [ 306.267413][ T49] bridge_slave_0: left promiscuous mode [ 306.275048][ T5870] Bluetooth: hci2: command tx timeout [ 306.287844][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.430928][ T7480] capability: warning: `syz.2.332' uses deprecated v2 capabilities in a way that may be insecure [ 306.664255][ T5946] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 306.688785][ T5870] Bluetooth: hci0: unexpected event for opcode 0x202d [ 306.878128][ T5946] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 306.955151][ T5946] usb 5-1: config 0 has no interface number 1 [ 306.972811][ T5946] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 307.039257][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.263467][ T5946] usb 5-1: config 0 descriptor?? [ 307.578889][ T7490] loop2: detected capacity change from 0 to 256 [ 307.730065][ T5946] qcserial 5-1:0.2: Qualcomm USB modem converter detected [ 307.761585][ T7490] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 307.824189][ T7490] FAT-fs (loop2): Filesystem has been set read-only [ 307.908364][ T7490] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 308.047400][ T7490] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 308.103967][ T30] audit: type=1800 audit(1755203235.588:3): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.337" name="file1" dev="loop2" ino=1048605 res=0 errno=0 [ 308.135789][ T6070] usb 5-1: USB disconnect, device number 3 [ 308.189166][ T6070] qcserial 5-1:0.2: device disconnected [ 308.310237][ T7494] loop1: detected capacity change from 0 to 512 [ 308.354396][ T5870] Bluetooth: hci2: command tx timeout [ 308.384610][ T7494] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 308.446690][ T7494] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 308.467845][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.341141][ T7497] syz.2.339: attempt to access beyond end of device [ 309.341141][ T7497] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 309.355601][ T7497] syz.2.339: attempt to access beyond end of device [ 309.355601][ T7497] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 309.368535][ T7497] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 309.378306][ T7497] syz.2.339: attempt to access beyond end of device [ 309.378306][ T7497] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 309.391202][ T7497] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 309.400788][ T7497] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 309.408424][ T7497] UDF-fs: Scanning with blocksize 512 failed [ 309.415528][ T7497] syz.2.339: attempt to access beyond end of device [ 309.415528][ T7497] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 309.428654][ T7497] syz.2.339: attempt to access beyond end of device [ 309.428654][ T7497] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 309.514241][ T7497] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 309.524010][ T7497] syz.2.339: attempt to access beyond end of device [ 309.524010][ T7497] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 309.537021][ T7497] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 309.546588][ T7497] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 309.554241][ T7497] UDF-fs: Scanning with blocksize 1024 failed [ 309.561583][ T7497] syz.2.339: attempt to access beyond end of device [ 309.561583][ T7497] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 309.574538][ T7497] syz.2.339: attempt to access beyond end of device [ 309.574538][ T7497] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 309.587561][ T7497] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 309.597454][ T7497] syz.2.339: attempt to access beyond end of device [ 309.597454][ T7497] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 309.610461][ T7497] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 309.620069][ T7497] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 309.627724][ T7497] UDF-fs: Scanning with blocksize 2048 failed [ 309.634738][ T7497] syz.2.339: attempt to access beyond end of device [ 309.634738][ T7497] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 309.647800][ T7497] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 309.657565][ T7497] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 309.667614][ T7497] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 309.675269][ T7497] UDF-fs: Scanning with blocksize 4096 failed [ 309.681319][ T7497] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 310.655200][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.694348][ T49] bond0 (unregistering): Released all slaves [ 310.708424][ T7494] EXT4-fs (loop1): failed to open journal device unknown-block(11,127) -6 [ 310.902395][ T7506] loop4: detected capacity change from 0 to 8 [ 310.936994][ T7506] SQUASHFS error: Failed to read block 0x4de: -5 [ 311.088277][ T49] hsr_slave_0: left promiscuous mode [ 311.097256][ T7506] SQUASHFS error: Failed to read block 0x4de: -5 [ 311.103843][ T30] audit: type=1800 audit(1755203238.598:4): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.341" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 311.139262][ T7506] SQUASHFS error: Failed to read block 0x4de: -5 [ 311.178993][ T7506] SQUASHFS error: Failed to read block 0x4de: -5 [ 311.192166][ T49] hsr_slave_1: left promiscuous mode [ 311.213479][ T5870] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 311.214959][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.285402][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.685758][ T7515] loop4: detected capacity change from 0 to 512 [ 311.707159][ T7515] EXT4-fs: Ignoring removed bh option [ 311.784344][ T7515] EXT4-fs: Mount option(s) incompatible with ext2 [ 311.934554][ T49] team0 (unregistering): Port device team_slave_1 removed [ 312.000020][ T49] team0 (unregistering): Port device team_slave_0 removed [ 312.506734][ T7518] loop2: detected capacity change from 0 to 1024 [ 312.556322][ T7518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.722488][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.812488][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.845810][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.853063][ T7412] bridge_slave_0: entered allmulticast mode [ 312.879921][ T7412] bridge_slave_0: entered promiscuous mode [ 312.967175][ T7412] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.018127][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.260198][ T7412] bridge_slave_1: entered allmulticast mode [ 313.293460][ T7412] bridge_slave_1: entered promiscuous mode [ 313.527100][ T7534] loop1: detected capacity change from 0 to 256 [ 313.703850][ T7412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.771405][ T7412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.798881][ T7531] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 313.813612][ T7531] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 313.902926][ T7106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.868527][ T7531] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 314.889217][ T30] audit: type=1326 audit(1755203242.388:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3138ebe9 code=0x7fc00000 [ 314.984895][ T7531] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 315.032569][ T7531] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.038865][ T7531] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 315.128033][ T7106] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.146802][ T7531] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 315.160856][ T7531] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 315.211157][ T7412] team0: Port device team_slave_0 added [ 315.229538][ T7531] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 315.242443][ T7531] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 315.271996][ T7412] team0: Port device team_slave_1 added [ 315.308812][ T7531] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.324966][ T7531] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 316.332869][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 317.271229][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.277680][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.371641][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.379046][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.505973][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.513136][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.745870][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.771390][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.772934][ T7561] loop4: detected capacity change from 0 to 1024 [ 317.824649][ T7412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.915957][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.973139][ T7561] loop4: detected capacity change from 0 to 512 [ 317.974091][ T5946] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 317.987748][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.104040][ T7412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.267790][ T5946] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 318.312521][ T5946] usb 3-1: config 0 has no interface number 0 [ 318.376695][ T5946] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 318.430777][ T5946] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 318.452098][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.502191][ T5946] usb 3-1: Product: syz [ 318.520895][ T5946] usb 3-1: Manufacturer: syz [ 318.564076][ T5946] usb 3-1: SerialNumber: syz [ 318.605230][ T5946] usb 3-1: config 0 descriptor?? [ 318.611524][ T7565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 318.630570][ T5946] usb-storage 3-1:0.20: USB Mass Storage device detected [ 318.647830][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.358'. [ 318.662292][ T7412] hsr_slave_0: entered promiscuous mode [ 318.706007][ T7412] hsr_slave_1: entered promiscuous mode [ 318.720183][ T7412] debugfs: 'hsr0' already exists in 'hsr' [ 318.727434][ T7412] Cannot create hsr debugfs directory [ 318.742127][ T5946] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 318.844153][ T5946] scsi host1: usb-storage 3-1:0.20 [ 318.929535][ T5946] usb 3-1: USB disconnect, device number 5 [ 319.008124][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.034856][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.054381][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.070979][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.079730][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.091560][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.104655][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.113980][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.126397][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.151966][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.619166][ T7588] warning: `syz.2.362' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 320.934326][ T7599] loop4: detected capacity change from 0 to 2048 [ 320.973123][ T7599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.241028][ T51] Bluetooth: hci4: command tx timeout [ 322.895482][ T7620] loop3: detected capacity change from 0 to 1024 [ 323.115197][ T7602] loop1: detected capacity change from 0 to 512 [ 323.181419][ T7602] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 323.191799][ T7602] EXT4-fs (loop1): blocks per group (255) and clusters per group (8192) inconsistent [ 323.314312][ T51] Bluetooth: hci4: command tx timeout [ 323.339561][ T7602] Bluetooth: MGMT ver 1.23 [ 325.473313][ T5870] Bluetooth: hci4: command tx timeout [ 325.908229][ T7635] trusted_key: encrypted_key: insufficient parameters specified [ 326.473188][ T1094] bridge_slave_1: left allmulticast mode [ 326.493327][ T1094] bridge_slave_1: left promiscuous mode [ 326.512211][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.582519][ T1094] bridge_slave_0: left allmulticast mode [ 326.624094][ T1094] bridge_slave_0: left promiscuous mode [ 326.682818][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.785963][ T5870] Bluetooth: hci4: command tx timeout [ 331.403376][ T7672] loop3: detected capacity change from 0 to 1024 [ 331.459538][ T7674] loop4: detected capacity change from 0 to 128 [ 331.461063][ T7672] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 331.530272][ T7674] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 331.530445][ T7672] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 331.579503][ T7672] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 331.589899][ T7672] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 331.613051][ T7674] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 331.717862][ T7674] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 1980571463 (only 1 groups) [ 332.031184][ T5881] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.719890][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.873262][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.951120][ T1094] bond0 (unregistering): Released all slaves [ 333.052403][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 333.132203][ T7685] loop4: detected capacity change from 0 to 1764 [ 333.275732][ T7690] loop1: detected capacity change from 0 to 512 [ 333.444863][ T7690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.627938][ T1094] hsr_slave_0: left promiscuous mode [ 333.692252][ T30] audit: type=1326 audit(1755203261.078:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7684 comm="syz.4.385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4100b8ebe9 code=0x0 [ 333.764607][ T7690] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.989559][ T7690] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 334.065354][ T7690] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 334.125633][ T7690] EXT4-fs (loop1): This should not happen!! Data will be lost [ 334.125633][ T7690] [ 334.153450][ T1094] hsr_slave_1: left promiscuous mode [ 334.170778][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.207193][ T7690] EXT4-fs (loop1): Total free blocks count 0 [ 334.213369][ T7690] EXT4-fs (loop1): Free/Dirty block details [ 334.231717][ T7690] EXT4-fs (loop1): free_blocks=65280 [ 334.268162][ T7690] EXT4-fs (loop1): dirty_blocks=33 [ 334.284992][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.292441][ T7690] EXT4-fs (loop1): Block reservation details [ 334.301938][ T7690] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 334.657609][ T7706] loop4: detected capacity change from 0 to 256 [ 334.677272][ T7706] exfat: Deprecated parameter 'utf8' [ 334.890359][ T7706] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 335.571350][ T7706] exFAT-fs (loop4): error, in sector 160, dentry 12 should be unused, but 0x85 [ 337.642879][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 337.671597][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 338.108482][ T7692] gtp0: left promiscuous mode [ 338.353641][ T7577] chnl_net:caif_netlink_parms(): no params data found [ 338.545122][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.693325][ T7738] loop1: detected capacity change from 0 to 256 [ 338.700726][ T7738] vfat: Bad value for 'fmask' [ 338.717759][ T7738] loop1: detected capacity change from 0 to 512 [ 338.817281][ T7412] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 338.826750][ T7738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.876224][ T7738] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.969585][ T7738] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.397: iget: bad i_size value: 2533274857506816 [ 339.076683][ T7738] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.397: iget: bad i_size value: 2533274857506816 [ 339.439494][ T7412] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 339.462886][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.510460][ T7412] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 339.609041][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.654133][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.691943][ T7577] bridge_slave_0: entered allmulticast mode [ 339.723089][ T7577] bridge_slave_0: entered promiscuous mode [ 339.753684][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.771302][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.791703][ T7577] bridge_slave_1: entered allmulticast mode [ 339.821115][ T7759] loop1: detected capacity change from 0 to 4096 [ 339.831372][ T7577] bridge_slave_1: entered promiscuous mode [ 339.846271][ T7412] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.916737][ T7759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.068761][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 340.092845][ T7766] loop3: detected capacity change from 0 to 512 [ 340.207443][ T7766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.290042][ T7766] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.308498][ T7577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.360085][ T5863] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.412406][ T7577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.510775][ T7766] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes [ 341.300014][ T5871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.460026][ T7577] team0: Port device team_slave_0 added [ 341.509714][ T7577] team0: Port device team_slave_1 added [ 341.597219][ T7797] loop1: detected capacity change from 0 to 128 [ 341.626905][ T7797] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 341.656598][ T7801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.697921][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.710470][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.724278][ T7797] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 341.782093][ T7577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.839583][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.864119][ T30] audit: type=1800 audit(1755203269.358:7): pid=7797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.411" name="file2" dev="loop1" ino=1048607 res=0 errno=0 [ 341.902791][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.022202][ T7577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.779947][ T7816] loop3: detected capacity change from 0 to 512 [ 343.297508][ T7816] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 343.517008][ T7816] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 343.539904][ T7816] EXT4-fs (loop3): 1 truncate cleaned up [ 343.577689][ T7816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.059941][ T5871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.258227][ T7577] hsr_slave_0: entered promiscuous mode [ 345.249160][ T7833] loop2: detected capacity change from 0 to 2048 [ 345.669906][ T7577] hsr_slave_1: entered promiscuous mode [ 345.698593][ T7840] loop3: detected capacity change from 0 to 1024 [ 345.730264][ T7577] debugfs: 'hsr0' already exists in 'hsr' [ 345.736775][ T7577] Cannot create hsr debugfs directory [ 345.766168][ T7833] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.857258][ T7840] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 345.978002][ T7840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.331275][ T5871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.973107][ T7412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.233315][ T7858] loop2: detected capacity change from 0 to 2048 [ 348.016203][ T7858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.296744][ T7412] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.308252][ T30] audit: type=1800 audit(1755203275.808:8): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.427" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 349.099570][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.106797][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.180733][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.187928][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.781289][ T7873] loop2: detected capacity change from 0 to 8 [ 350.883474][ T7412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 350.896082][ T7873] SQUASHFS error: Failed to read block 0x4de: -5 [ 350.910739][ T7873] SQUASHFS error: Failed to read block 0x4de: -5 [ 350.987428][ T30] audit: type=1800 audit(1755203278.468:9): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.430" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 351.024393][ T7877] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 351.024393][ T7877] The task syz.2.430 (7877) triggered the difference, watch for misbehavior. [ 351.140135][ T7880] SQUASHFS error: Failed to read block 0x4de: -5 [ 351.199888][ T7880] SQUASHFS error: Failed to read block 0x4de: -5 [ 351.254393][ T7577] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 351.264463][ T7883] usb usb7: usbfs: process 7883 (syz.4.422) did not claim interface 0 before use [ 351.306390][ T7577] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 351.769848][ T7577] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 352.104156][ T7577] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 356.303801][ T7577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.408121][ T7577] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.468644][ T7412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.547431][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.554621][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.639970][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.647110][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.989057][ T7944] loop2: detected capacity change from 0 to 512 [ 359.114374][ T7944] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 359.132558][ T7577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.207516][ T7944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 359.279976][ T7944] System zones: 1-12 [ 359.304706][ T7944] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 359.304706][ T7944] [ 359.332958][ T7948] loop3: detected capacity change from 0 to 512 [ 359.376313][ T7944] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 359.414037][ T7948] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 359.545414][ T7948] EXT4-fs (loop3): 1 truncate cleaned up [ 359.606235][ T7948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.635012][ T7944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 359.918188][ T7944] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 359.918188][ T7944] [ 360.036018][ T5871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.160133][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.172328][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.181615][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.194478][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.204532][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.222925][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.674367][ T7974] loop3: detected capacity change from 0 to 256 [ 360.799776][ T7974] FAT-fs (loop3): Directory bread(block 64) failed [ 360.806637][ T7974] FAT-fs (loop3): Directory bread(block 65) failed [ 360.813800][ T7974] FAT-fs (loop3): Directory bread(block 66) failed [ 360.820576][ T7974] FAT-fs (loop3): Directory bread(block 67) failed [ 360.827793][ T7974] FAT-fs (loop3): Directory bread(block 68) failed [ 360.834481][ T7974] FAT-fs (loop3): Directory bread(block 69) failed [ 360.841665][ T7974] FAT-fs (loop3): Directory bread(block 70) failed [ 360.848249][ T7974] FAT-fs (loop3): Directory bread(block 71) failed [ 360.855394][ T7974] FAT-fs (loop3): Directory bread(block 72) failed [ 360.863478][ T7974] FAT-fs (loop3): Directory bread(block 73) failed [ 362.505406][ T7979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 362.815546][ T5870] Bluetooth: hci2: command tx timeout [ 364.576991][ T7987] loop2: detected capacity change from 0 to 4096 [ 365.437199][ T5870] Bluetooth: hci2: command tx timeout [ 365.497502][ T7987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.900071][ T5866] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.307800][ T8002] loop3: detected capacity change from 0 to 256 [ 366.380074][ T7577] veth0_vlan: entered promiscuous mode [ 366.395539][ T8002] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 366.712185][ T7577] veth1_vlan: entered promiscuous mode [ 367.509947][ T5870] Bluetooth: hci2: command tx timeout [ 367.725664][ T7960] chnl_net:caif_netlink_parms(): no params data found [ 368.344464][ T7577] veth0_macvtap: entered promiscuous mode [ 368.370864][ T1094] bridge_slave_1: left allmulticast mode [ 368.384609][ T1094] bridge_slave_1: left promiscuous mode [ 368.390376][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.412215][ T8012] loop3: detected capacity change from 0 to 2048 [ 368.430684][ T1094] bridge_slave_0: left allmulticast mode [ 368.472634][ T1094] bridge_slave_0: left promiscuous mode [ 368.481292][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.515684][ T8012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.532359][ T5932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 369.554938][ T5870] Bluetooth: hci2: command tx timeout [ 370.598778][ T8012] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 370.619985][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 370.674324][ T5932] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.719933][ T5932] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.744773][ T13] ------------[ cut here ]------------ [ 370.750534][ T13] kernel BUG at fs/ext4/inode.c:2809! [ 370.768590][ T13] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 370.775048][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(full) [ 370.787027][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.797090][ T13] Workqueue: writeback wb_workfn (flush-7:3) [ 370.803095][ T13] RIP: 0010:ext4_do_writepages+0x4607/0x4610 [ 370.809088][ T13] Code: c6 40 7a 9e 8b e8 59 aa b4 fe 90 0f 0b e8 d1 59 4c ff 4c 89 f7 48 c7 c6 20 7e 9e 8b e8 42 aa b4 fe 90 0f 0b e8 ba 59 4c ff 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 370.828686][ T13] RSP: 0018:ffffc90000126cc0 EFLAGS: 00010293 [ 370.834750][ T13] RAX: ffffffff827351d6 RBX: 0000006210000000 RCX: ffff88801cae0000 [ 370.842714][ T13] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 370.850675][ T13] RBP: ffffc900001270f0 R08: ffff888050ffdff7 R09: 1ffff1100a1ffbfe [ 370.858637][ T13] R10: dffffc0000000000 R11: ffffed100a1ffbff R12: 0000000000000001 [ 370.866597][ T13] R13: ffffc90000127140 R14: 0000004000000000 R15: dffffc0000000000 [ 370.874559][ T13] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 370.883476][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 370.890047][ T13] CR2: 00007f42a6b7ae9c CR3: 0000000054e3e000 CR4: 0000000000350ef0 [ 370.898007][ T13] Call Trace: [ 370.901271][ T13] [ 370.904193][ T13] ? __pfx_virtscsi_add_cmd+0x10/0x10 [ 370.909558][ T13] ? scsi_alloc_sgtables+0x761/0xc40 [ 370.914846][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.920473][ T13] ? sd_setup_rw10_cmnd+0x12b/0x3c0 [ 370.925669][ T13] ? virtscsi_queuecommand+0x53e/0xbe0 [ 370.931120][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.936739][ T13] ? virtscsi_queuecommand+0x718/0xbe0 [ 370.942187][ T13] ? __pfx_ext4_do_writepages+0x10/0x10 [ 370.947732][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.953358][ T13] ? scsi_queue_rq+0x1d4d/0x2cc0 [ 370.958286][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.963917][ T13] ? look_up_lock_class+0x74/0x170 [ 370.969031][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.974657][ T13] ? register_lock_class+0x51/0x320 [ 370.979858][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.985497][ T13] ? __lock_acquire+0xab9/0xd20 [ 370.990366][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 370.995997][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.001635][ T13] ? rcu_read_lock_any_held+0xb3/0x120 [ 371.007099][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.012735][ T13] ext4_writepages+0x205/0x350 [ 371.017502][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.023134][ T13] ? __pfx_ext4_writepages+0x10/0x10 [ 371.028591][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.034226][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.039863][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 371.045072][ T13] ? __pfx_ext4_writepages+0x10/0x10 [ 371.050356][ T13] do_writepages+0x32e/0x550 [ 371.054956][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.060585][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 371.065953][ T13] ? writeback_sb_inodes+0x384/0x1010 [ 371.071327][ T13] __writeback_single_inode+0x145/0xff0 [ 371.076870][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.082508][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 371.087721][ T13] writeback_sb_inodes+0x6c7/0x1010 [ 371.092938][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 371.098590][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.104219][ T13] ? rcu_is_watching+0x15/0xb0 [ 371.108987][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.114660][ T13] wb_writeback+0x43b/0xaf0 [ 371.119164][ T13] ? queue_io+0x3c1/0x590 [ 371.123484][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 371.128502][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.133697][ T13] wb_workfn+0x409/0xef0 [ 371.137942][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 371.142701][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.148329][ T13] ? __lock_acquire+0xab9/0xd20 [ 371.153182][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.158805][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.164433][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.169626][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 371.175338][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 371.181050][ T13] process_scheduled_works+0xae1/0x17b0 [ 371.186597][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.192566][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.198192][ T13] worker_thread+0x8a0/0xda0 [ 371.202783][ T13] kthread+0x711/0x8a0 [ 371.206850][ T13] ? __pfx_worker_thread+0x10/0x10 [ 371.211950][ T13] ? __pfx_kthread+0x10/0x10 [ 371.216532][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.222158][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.227346][ T13] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.232975][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.238165][ T13] ? __pfx_kthread+0x10/0x10 [ 371.242749][ T13] ret_from_fork+0x3fc/0x770 [ 371.247328][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 371.252431][ T13] ? __switch_to_asm+0x39/0x70 [ 371.257189][ T13] ? __switch_to_asm+0x33/0x70 [ 371.261946][ T13] ? __pfx_kthread+0x10/0x10 [ 371.266532][ T13] ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 371.271304][ T13] [ 371.274307][ T13] Modules linked in: [ 371.280049][ T13] ---[ end trace 0000000000000000 ]--- [ 371.311904][ T5932] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 371.322395][ T5932] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 371.330938][ T5932] usb 2-1: Product: syz [ 371.335311][ T5932] usb 2-1: Manufacturer: syz [ 371.344901][ T13] RIP: 0010:ext4_do_writepages+0x4607/0x4610 [ 371.346025][ T5932] hub 2-1:4.0: USB hub found [ 371.358682][ T13] Code: c6 40 7a 9e 8b e8 59 aa b4 fe 90 0f 0b e8 d1 59 4c ff 4c 89 f7 48 c7 c6 20 7e 9e 8b e8 42 aa b4 fe 90 0f 0b e8 ba 59 4c ff 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 371.380855][ T13] RSP: 0018:ffffc90000126cc0 EFLAGS: 00010293 [ 371.383170][ T8031] cgroup: Unknown subsys name 'cpuset' [ 371.387070][ T13] RAX: ffffffff827351d6 RBX: 0000006210000000 RCX: ffff88801cae0000 [ 371.387092][ T13] RDX: 0000000000000000 RSI: 0000004000000000 RDI: 0000000000000000 [ 371.387108][ T13] RBP: ffffc900001270f0 R08: ffff888050ffdff7 R09: 1ffff1100a1ffbfe [ 371.387127][ T13] R10: dffffc0000000000 R11: ffffed100a1ffbff R12: 0000000000000001 [ 371.387144][ T13] R13: ffffc90000127140 R14: 0000004000000000 R15: dffffc0000000000 [ 371.387185][ T13] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 371.387205][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.387223][ T13] CR2: 00007f42a6b7ae9c CR3: 000000007e801000 CR4: 0000000000350ef0 [ 371.486804][ T5932] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 371.534327][ T5932] usb 2-1: USB disconnect, device number 6 [ 371.554334][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 371.580559][ T13] Kernel panic - not syncing: Fatal exception [ 371.586895][ T13] Kernel Offset: disabled [ 371.591222][ T13] Rebooting in 86400 seconds..